owa.edwardjones.com

- Edward Jones -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 6b:f4:3c:b9:fe:9c:55:e3:00:00:00:00:50:e7:31:4a was issued on by Entrust, Inc..

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Edward Jones

Organization: Edward Jones
Organization unit: IS
State / Province: Missouri
Locality: Maryland Heights
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6b:f4:3c:b9:fe:9c:55:e3:00:00:00:00:50:e7:31:4a
Serial Number (int): 143495547663052971092240166455651807562
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 58:4e:0e:f5:66:c4:50:ef:d2:99:7d:9c:49:fa:a7:d9:83:cd:66:f8
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 05:e5:20:04:bf:55:c0:78:3b:f8:10:ea:59:34:67:20:e1:ce:a4:cc
Fingerprint (sha256): 17:e3:03:36:40:90:1e:2f:f4:6c:f1:71:d3:92:93:38:fb:34:18:16:d8:f1:0e:7f:f1:88:f0:0f:5b:4c:71:48

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate owa.edwardjones.com

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for owa.edwardjones.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

owa.edwardjones.com
nwpexcas02.edj.ad.edwardjones.com
twpexcas01.edj.ad.edwardjones.com
twpexcas02.edj.ad.edwardjones.com
nwpexcas01.edj.ad.edwardjones.com
nwpexcas04.edj.ad.edwardjones.com
nwpexcas10.edj.ad.edwardjones.com
nwpexpfr01.edj.ad.edwardjones.com
twpexpfr01.edj.ad.edwardjones.com
edwardjones.com
autodiscover.ad.edwardjones.com
autodiscover.edwardjones.com
autodiscover.testjones.net
ad.edwardjones.com
testjones.net
cas.edwardjones.com
cas.testjones.net
nwpexedge01.edj.ad.edwardjones.com
twpexedge01.edj.ad.edwardjones.com
nwpexhub01.edj.ad.edwardjones.com
twpexhub01.edj.ad.edwardjones.com
nwpexmbx01.edj.ad.edwardjones.com
twpexmbx01.edj.ad.edwardjones.com

Other certificates including the domain name edwardjones.com

(limited to 100 certificates)
retiree.edwardjones.com
mobilemail.edwardjones.com
accountlink.edwardjones.com
www.edwardjones.com
iaadata.edwardjones.com
PRODDIST.edwardjones.com
apigw.devjones.com
aggregation.accountaccess.edwardjones.com
billpayment.edwardjones.com
napsmgs-1.edwardjones.com
clonesigningcert2022.edwardjones.com
ra.edwardjones.com
saf-gtwy.edwardjones.com
earlywarning.edwardjones.com
appgwy.edwardjones.com
assets-stage.accountaccess.edwardjones.com
tapsmgs-1.edwardjones.com
www.edwardjones.com
dbx-mobscanner.edwardjones.com
sslweb.edwardjones.com
www.borrowing.edwardjones.com
jcmsoutlook.edwardjones.com
ofx.edwardjones.com
xserver.edwardjones.com
web-prod-origin.ac.edwardjones.com
esignature-devl.edwardjones.com
bpm-gtwy.edwardjones.com
openam-edwardjones-usc1-staging.id.forgerock.io
iaadata.edwardjones.com
reg-www.edwardjones.com
sni.cloudflaressl.com
mailhost.edwardjones.com
api.devjones.com
careers.edwardjones.com
onlineaccess.dev.edwardjones.com
lync2013fepooltpe01ext.testjones.net
internalcareers.edwardjones.com
Annuity.edwardjones.com
ext-sra.edwardjones.com
www.borrowing.edwardjones.com
jira-devl-ext.edwardjones.com
node-prod.ac.edwardjones.com
apigw.edwardjones.com
sra.edwardjones.com
vdesk.edwardjones.com
sni.cloudflaressl.com
bluematrix.edwardjones.com
access.edwardjones.com
vdesk.edwardjones.com
rw-phoneboot.edwardjones.com
accountaccess.edwardjones.com
mypriorities.uat.edwardjones.com
sni.cloudflaressl.com
www.edwardjones.com
ra.edwardjones.com
secureaccessmobile.edwardjones.com
bip-api.edwardjones.com
fadv.edwardjones.com
api.devjones.com
richmedia.edwardjones.com
exhybrid-edge.testjones.net
internalcareers.edwardjones.com
match.edwardjones.com
napsmgs-1.edwardjones.com
bluematrix.edwardjones.com
vdesk.edwardjones.com
owa.edwardjones.com
DEVLDIST.edwardjones.com
www.edwardjones.com
ra.edwardjones.com
onlineaccess.cms.edwardjones.com
iaa-legacyoa-gateway.apps.edwardjones.com
hrm-jac.edwardjones.com
web-stage.ac.edwardjones.com
web-qa.ac.edwardjones.com
ra.edwardjones.com
cantradereview.edwardjones.com
access.edwardjones.com
lync2013fepooltpe01ext.testjones.net
mobility.edwardjones.com
billpayment.edwardjones.com
apigw.edwardjones.com
tapasmss-1.edwardjones.com
sfintegrationprod.edwardjones.com
tokensigning2021.edwardjones.com
apiapp.edwardjones.com
test.edwardjones.com
san-20-s12.tlsprovisioning.exacttarget.com
xrule.edwardjones.com
cestask.devjones.com
ofx.edwardjones.com
mypriorities.edwardjones.com
sra.edwardjones.com
twistlock-high-dev.devjones.com
ra.edwardjones.com
devjones.com
webtest.edwardjones.com
match.edwardjones.com
mypriorities.uat.edwardjones.com
sdpweb-prod.edwardjones.com

Certificate

The complete raw certificate details for owa.edwardjones.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PqXTyQtOC+pe4RZGSwF
NUrGHi6g6uSPwglyyXCZWSqgPKVGd/ZzxY1WUMohTM68uNdC1jj1tUPcPbGok5lc
Bquc1UdB4VTA60quGsHpify9hiWZsdreUg5p1zyfSv0kJjVxi3+QWFrwtpoIOMKz
sUTvqX5iTVmYYa6PTYZxClXObpebhuGkqAHFkxudIgWMJ4fFUIlDsA/c1GWOjLdy
77BwzyDBA77Axk0RgBvaMHnpQ+Nk1/naBgClyq3BHd55SrWetZhf3xGql7fbXPD1
KavSyh2qRFkXqAz/cyc/7S1R5GNDQa5pNDvwf+K+EQSC1rlyYactDJuGC+tXCo4p
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 143495547663052971092240166455651807562
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-06 16:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-05 16:29:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Missouri'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maryland Heights'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Edward Jones'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'owa.edwardjones.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26886091705781639999210106565866893023822002030377572451045520085224136128827249231677503883537699876786689386979115613426910768966708206789778023881445987491710160191405437092780704239713636591678798507722317902894079251063505680238147785838674249833900757937376553371099007441865494755223992794483197842725221894474176933579848692794378980799182802412471377841390605462607068170982346487587257424003156162767671006782055443176430051176015305308729993916383649231710259337725324830601892419841558962376272636386748922681726820820077928096085903561568324002253583981758011945158358154287461407965897463910888777853239
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (700 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.edwardjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwpexcas02.edj.ad.edwardjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twpexcas01.edj.ad.edwardjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twpexcas02.edj.ad.edwardjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwpexcas01.edj.ad.edwardjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwpexcas04.edj.ad.edwardjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwpexcas10.edj.ad.edwardjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwpexpfr01.edj.ad.edwardjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twpexpfr01.edj.ad.edwardjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edwardjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ad.edwardjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.edwardjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.testjones.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ad.edwardjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testjones.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas.edwardjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas.testjones.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwpexedge01.edj.ad.edwardjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twpexedge01.edj.ad.edwardjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwpexhub01.edj.ad.edwardjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twpexhub01.edj.ad.edwardjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwpexmbx01.edj.ad.edwardjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twpexmbx01.edj.ad.edwardjones.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							584e0ef566c450efd2997d9c49faa7d983cd66f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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